Article 1: Identification of the Data Controller This Privacy Policy defines the rigorous data processing protocols maintained by Nordiqo ("the Platform", "we", or "our"), with its registered office located at Level 15, Dashwood House, 69 Old Broad Street, London EC2M 1QS, United Kingdom. We act as a data controller in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. To ensure absolute data integrity, we have appointed a Data Protection Officer (DPO) reachable at [email protected].

Article 2: Categories of Personal Data Collected In accordance with the principle of data minimisation, we collect:

Identity Metrics: Full legal name, date of birth, nationality, and official government ID for mandatory KYC/AML verification.

Financial Telemetry: Source of funds, digital asset wallet addresses (public keys), and transaction history.

Digital Footprint: IP addresses, hardware specifications, and detailed interaction logs with our interfaces.

Article 3: Legal Basis for Processing Our collection and use of information are based on:

Contractual Necessity: Indispensable for the management of your account and the delivery of our services.

Statutory Obligations: Compliance with the UK Money Laundering Regulations and financial reporting requirements.

Legitimate Business Interests: Proactive fraud prevention and network security enhancement.

Explicit Consent: For personalized market analysis and non-essential analytical cookies.

Article 4: Advanced Security and Sovereignty

Encryption: All data at rest is stored using AES-256 cryptographic protocols.

Transmission: Secured via TLS 1.3 end-to-end encryption.

Hosting: Data is exclusively hosted on redundant and highly secure servers within the UK or the European Economic Area (EEA), ensuring total protection under UK data sovereignty laws.

Article 5: Retention and Your Rights We retain identity and financial records for a minimum period of five (5) to seven (7) years following account closure to satisfy UK tax and anti-money laundering requirements. Under UK GDPR, you possess the right to access, rectification, erasure, and portability of your data. Requests can be sent to [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).